open-kritt open-sources agent-orchestrated vulnerability hunting on the premise that whole-repo scanning fails.

Kritt-ai/open-kritt (1,592 stars, 283 forks, AGPL-3.0) opens by rejecting the obvious approach: pointing a model at a whole repo and asking for vulnerabilities rarely works. It decomposes research into small well-defined tasks, runs them in parallel across agents, and merges into de-duplicated ranked findings with configurable validation, driven by a visual workflow builder and a self-hosted stack where prompts, workflows and providers stay with the operator. Companion paper at kritt.ai. AGPL is a deliberate constraint if you were thinking of embedding it commercially.